Users Guide

Key Path Diagnostics

The Key Path Diagnostic test checks all communication paths to ensure that a key can be transmitted

from the encryption key servers to the drive to properly encrypt and decrypt the tape cartridges.

The test consists of two parts. The rst part, the drive test, veries whether the communication between

library and drive is working properly. This test is run only on the drives that are congured to library-

managed encryption (LME).

The second part veries the communication between the library and the encryption key servers. If the

secondary ethernet port is enabled and congured, the tests are run on both ports separately.

The test consists of four subtests:

• Ping

This test checks if the key server can be reached. If ICMP requests are blocked on the server side, this

test fails as well. Therefore, the following tests are run regardless the result of the ping test.

• SSL/TLS

This test tries to establish a SSL/TLS connection with the key server. If this test fails, the following tests

are skipped because they would also fail. This test is skipped if SSL/TLS is not enabled.

• Key Server Login

This test is run only in combination with a KMIP encryption server since SKLM currently does not

support login. If this test fails, the following Key Retrieval test is skipped because it would also fail.

• Key Retrieval

This test requests a key from the encryption server. For SKLM servers, a key from the key pool is

requested. On other servers, the library acquires a specic diagnostic key.

Dell EMC ML3 Tape Library: User's Guide